38f58bf4aa9cc472becde9d0830f9170 | Triage

Sharing

General

Target

38f58bf4aa9cc472becde9d0830f9170
Size

34KB
MD5

38f58bf4aa9cc472becde9d0830f9170
SHA1

5c705d9d31c091f1e97d6baa6b80ff53e92e3f49
SHA256

b7e6ced455a38e4838a37df9b01888dcd6f1825db63d0b1a462ba0dc01fc31bc
SHA512

fc63fcdebd1d0cb6424dc6f47a2d66dfad12f02f436c99e01efea16ffb34ad8e3c25786b9ee66f60dc8d30385e68b0a2aa83f87b1bbb0a103185478ba32cab25
SSDEEP

768:POkMJ4+MyblA8Vsn1dr6xkOgKQryICcizus9u1gj:GmoRVsnfaXgKQrKciaslj

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
38f58bf4aa9cc472becde9d0830f9170
unpack001/out.upx

Files

38f58bf4aa9cc472becde9d0830f9170
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ